Static task
static1
Behavioral task
behavioral1
Sample
e4c3a1e6b349e253cce935d9ac2ccc232defeadc04d8cb5d0200392fa25b2b9f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4c3a1e6b349e253cce935d9ac2ccc232defeadc04d8cb5d0200392fa25b2b9f.dll
Resource
win10v2004-20220812-en
General
-
Target
e4c3a1e6b349e253cce935d9ac2ccc232defeadc04d8cb5d0200392fa25b2b9f
-
Size
37KB
-
MD5
29572e1fd0c3914cee630ac14b073dff
-
SHA1
0c171e8b99e2750ccb8c837206ecc7d9c85b29f3
-
SHA256
e4c3a1e6b349e253cce935d9ac2ccc232defeadc04d8cb5d0200392fa25b2b9f
-
SHA512
0f5121312027a6c0e9ba2e677f3ccb5e37d52870fc93c23deca1248cc5955f15c29190b5b656480eadab8e0b397beae8b32b4a71f4e45abf387b26a839d539cd
-
SSDEEP
384:YJV7O5q4yXQ0ME4skc0Avbmt6SlkA1IfLeCxdAm3QlFVeEZu9GY:YJwI4iMEicpStV1aUlFIS
Malware Config
Signatures
Files
-
e4c3a1e6b349e253cce935d9ac2ccc232defeadc04d8cb5d0200392fa25b2b9f.dll windows x86
2b909501b000ff6d15489550d59a7a79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCurrentProcessId
GetACP
VirtualAlloc
VirtualFree
GetCommandLineA
QueryPerformanceCounter
ExitProcess
SetEvent
LoadLibraryA
user32
LoadIconW
GetWindowRect
LoadIconW
PostMessageW
GetWindowRect
ShowWindow
LoadIconW
GetDC
gdi32
CreateCompatibleDC
GetTextMetricsW
BitBlt
BitBlt
BitBlt
LineTo
ExtTextOutW
TextOutW
GetDeviceCaps
CreateCompatibleDC
SelectObject
SelectObject
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ